62 lines
1.8 KiB
Plaintext
62 lines
1.8 KiB
Plaintext
https://github.com/wg-easy/wg-easy/pkgs/container/wg-easy
|
|
|
|
Create user and group
|
|
---------------------
|
|
Credentials -> Local Users -> Add
|
|
Full Name: wg-easy
|
|
Username: wg-easy
|
|
Disable Password: <selected>
|
|
Email: stuurmcp@telkomsa.net
|
|
UID: 3019
|
|
Create New Primary Group: <unselected>
|
|
Create Home Directory: <unchecked>
|
|
Samba Authentication: <unchecked>
|
|
Save
|
|
Credentials -> Local Groups -> Add
|
|
Name: wg-easy
|
|
GID: 3018
|
|
|
|
wg-easy UID: 3019
|
|
wg-easy GID: 3018
|
|
|
|
Create datasets
|
|
---------------
|
|
/mnt/SSD1/docker/data/wg-easy ; set Owner:Group to wg-easy:wg-easy
|
|
/mnt/SSD1/docker/data/wg-easy/wireguard ; set Owner:Group to wg-easy:wg-easy
|
|
|
|
Create secrets
|
|
--------------
|
|
# In docker shell:
|
|
cd /opt/stacks/wg-easy/secrets
|
|
# generate password hash and convert $ in hash to $$; password must be surrounded by single quotes
|
|
docker run --rm -it ghcr.io/wg-easy/wg-easy wgpw 'YOUR_PASSWORD' | sed -e s/\\$/\\$\\$/g
|
|
# Remove the single quotes from the generated hash and copy the result to local stacks\.env file
|
|
# Repeat the above for the prometheus metrics password
|
|
|
|
Copy folder to docker stacks
|
|
----------------------------
|
|
# In Windows cmd shell in wg-easy folder, enter:
|
|
./cp2nas 10.0.0.20
|
|
# OR
|
|
pscp -P 22 -r stacks/*.* root@10.0.0.20:/mnt/SSD1/docker/stacks/wg-easy/
|
|
# The above should copy compose.yaml and .env to /mnt/SSD1/docker/stacks/wg-easy
|
|
|
|
Add traefik UDP entrypoint
|
|
--------------------------
|
|
Assuming that WG_PORT=51820 in .env file:
|
|
If not present, add the following under "entrypoints:" in /opt/stacks/config/traefik.yml
|
|
wireguard:
|
|
address: ":51820/udp"
|
|
|
|
If not present, add the following under "ports:" in /opt/stacks/compose.yml
|
|
- target: 51820
|
|
published: 51820
|
|
protocol: udp
|
|
mode: host
|
|
Execute the above by editing traefik\stacks\compose.yml and traefik\stacks\config\traefik.yml on local computer and then copying to nas/server
|
|
|
|
|
|
|
|
|
|
|